Security Scanning — Vulnerability & SBOM (Universal) + NIST RMF Gate (US_FED only) #277
lahlforssecurity-scan.yml
on: schedule
Python Dependency Vulnerability Scan (Universal — NIST RA-5/SI-2 reporting: US_FED only)
1m 50s
Matrix: Container Image Vulnerability Scan — Trivy (Universal — NIST RA-5/CM-8 reporting: US_FED only)
Dependency Lockfile Validation (Universal — NIST SI-2/CM-8 reporting: US_FED only)
32s
OPA Rego Policy Lint and Test (Universal — NIST CM-6/SI-7 reporting: US_FED only)
9s
Secret Scanning (Gitleaks)
6s
Generate and Validate SBOM (Universal — NIST CM-8/POAM-006 reporting: US_FED only)
1m 14s
NIST SP 800-53 Compliance Gate (US_FED only)
0s
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
dependency-snapshot
|
1.06 KB |
sha256:d96aa6fa787a7601f2ee3fa75a2ff0ea31ba9d0994e264da131957a6a88e6c58
|
|
|
pip-audit-results
|
7.1 KB |
sha256:e50a165bd8cde26c92a6e76f8465ec970fc3212cf2b17342b5eaa1f4d9ee71b5
|
|
|
sbom-0
|
13.3 KB |
sha256:0a61172d1182bc10575ac3dbc788229ce0ef1121920c1665dff90893de016ba5
|
|
|
sbom-1
|
13.3 KB |
sha256:a3d7cf96680e7e5746b09f1bf9e90100cc95d95f74e51c2d921b41c94e43ac50
|
|
|
sbom-2
|
13.3 KB |
sha256:284426ecfd38e7bfe4f05a5005ce265350c35a242b184694609601656f8d76b2
|
|
|
sbom-58fe2be3bc246ab46cbd6e98b04b68ad0a248f64
|
59.9 KB |
sha256:e4f42594cbbcc60ba05ec8550d6b04dd39ec4260ddeea81ea0605c16256c3e95
|
|